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Part 1: 


Answer the following questions by clearly circling the most appropriate answer ( 1 point each ) 


1. Eavesdropping is what type of attack? 
(a^ Active 
Passive 

c. Aggressive 

d. Masquerading 


2. What is the inverse of confidentiality, integrity, and availability (C.I.A.) in risk management? 

a. misuse, exposure, destruction 

b. authorization, non-repudiation, integrity 
(c) disclosure, alteration, destruction 

(J) confidentiality, integrity, availability 


3. What type of cryptographic attack enables an attacker to discover the cryptographic key by 
selecting a series of plaintext and corresponding ciphertext? 

a. Purchase-key attack 

(b) Chosen plaintext attack 

c. Known plaintext attack 

d. Chosen-key attack 

4. 3DES (Tripple Data Encryption Standard) is based on which of the following? 
a. Hashing algorithm 

Symmetric key-based algorithm 

c. Asymmetric key-based algorithm 

d. None of these 

5. What characteristic of Digital Encryption Standard (DES) used in Electronic Code Book (ECB) mode 
makes it unsuitable for long messages? 

a. Block fragmentation causes message cipher instability. 

b. Weak keys will produce symmetrical message holes. 

Each message block produces a single ciphertext block. 

Repeated message blocks produce repeated ciphertext blocks. 
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6. What is the main component in DES that is responsible for diffusion 

a. The S-box 
b- The subkeys 

The swap operation 
d. The initial permutation (IP) 


7. DES creates 16 subkeys from a key. Which of the following can be considered a weak key: 
a. Weak keys: keys with more ones than zeros 



Weak keys: keys with more zeros than ones. 

Weak keys: keys that make all subkeys to be different. 

Weak keys: keys make the same subkey to be generated in more than one round. 


8. If by E k ( ) we denote the encryption function of a block cipher with a key K, and if the mode of 
operation is Q - £ k (P; XOR C ( _ 4 ) then the mode of operation is: 

a. ECB ( Electronic Code book) 

(jp CBC( Cipher Block Chaining) 

c. CFB ( Cipher FeedBack ) 

d. OFB( Output FeedBack) 

e. CTR ( Counter) 


9. In AES, the first and the last round begin with the following reversible part: 

a. MixColumns 
(lx) AddRoundKey 
/ c. ShiftRows 

d. Substitute bytes 

e. KeyExpand 

10. In DES, if a small number of encodings give back the plaintext, what is likely the cause? 
( DES have 16 rounds with 16 subkeys, subscript indicate round subkey ) 



ki-k 3 , k 2 -k 4 , k 5 -k 7 , kg k 8 , .. 
k 2 =ki+l, k 3 =k 2 +l, k 4 =k 3 +l,... 

ki..k 8 , kg = k 8 , k 10 -k 7 , kn— kg, .. k^g— k^ 
ki=all bits are l's, k 8 =all bits are l's, 


k 16 =all bits are l's, 


remaining subkeys are all zeros. 
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Part 2: 


1. Define each of the following attacks: [ 4 points ] 

i. What is the "traffic analysis"? 


ii. What is a "masquerade"? 


iii. What is a "replay"? 


iv. What is a "denial of service"? 


2. Explain what is "One-time pad" [ 2 points ] 


3. Construct a table for the Playfair Cipher with the keyword EFFECTIVENESS? [ 3 points ] 

Then encrypt the phrase: "EXAMFO" 


4 


4. Assume the following monoalphabetic cipher where it uses a keyword from which the cipher 
sequence can be generated. For example, using the keyword, MARVEL, write out the keyword 
followed by unused letters in normal order and match this against the plaintext letters: 

Plain :abcdefghijklmnopqrstuvwxyz 

Cipher iMARVELbcdfghi j Knopqstuwxyz 

Now, given the following keyword: Partime , generate the sequence of cipher letters using the 
above key word and use it to encrypt the word usb. [ 3 points ] 


5. Substitution ciphers. [ 2 points ] 

a. Monoalphabetic substitution cipher is not secure. Why? 

b. Playfair requires a double letter frequency table to break the algorithm. If a new 
algorithm uses triple letter substitution, what would be the frequency table size required 
to break the algorithm? (for 26 English letters) 

6. In the ciphertext obtained using Vigenere cipher, a four character sequence "GMBH" appears at 
positions 24, 57, and 101. Based on this information, the most period of Vigenere cipher is? 

( Hint: 3 or 4 or 11 or 13 or 17 ) [2 points ] 


Part 3: 

7. What is the Double version of the 56-bit DES, and why is it much less secure than the expected 
112-bit DES? (Not enough to give just the name of it.) [ 3 points ] 
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8. About how many more times does a brute force key search take against a 106-bit key than 
against a 56-bit key? [ 2 points ] 


9. Assume we are using EDE with the 3 keys: K1 and K2, K3. [ 2 points ] 

Evaluate the cryptographic strength of following schemes by writing either weak or strong . 

i. Using 1 key: 

m -> E kl -> D kl -» E kl -> c 

ii. Using 2 keys: 

m Ekl Dk2 Ejc 2 c 

iii. Using 2 keys: 

m E k i Dk2 Eki c 

iv. Using 3 keys: 

m Eki E k2 E k3 ^> c 


10. AES and DES design issues [ 2 points ] 

For each of the following elements of DES, indicate the comparable element in AES. 

i. XOR of subkey material with the input to the f function. 

ii XOR of the /function output with the left half of the block. 

iii. The/function 

iv. Permutation p 


11. Ben has invented a Feistel cipher that is similar to DES but has only 3 rounds with the same 
subkey used in each round and an ^function which performs the following: 

F( m, k ) = k xor m 

Convince Ben that the resulting cipher is not secure. [ 5 points ] 
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